CLSA-2026-1794472876: TuxCare security update for io.micronaut (3 CVEs)
Published Nov 12, 2026
·Updated
TuxCare rebuilt 2 io.micronaut packages to address 3 CVEs. Fixed in 3.8.4-tuxcare.1.
Affected Software
2 affected componentsFixes available
tuxcare/io.micronaut:micronaut-http-client>=3.8.4<3.8.4-tuxcare.1
3.8.4-tuxcare.1
tuxcare/io.micronaut:micronaut-json-core>=3.8.4<3.8.4-tuxcare.1
3.8.4-tuxcare.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/io.micronaut:micronaut-http-clientto a version that resolves this vulnerability.Fixed in 3.8.4-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.micronaut:micronaut-json-coreto a version that resolves this vulnerability.Fixed in 3.8.4-tuxcare.1 - Upgrade
Upgrade
io.micronautto a version that resolves this vulnerability.Fixed in 3.8.4-tuxcare.1
Event History
Nov 12, 2026
Advisory Published
via OSV·09:41 AM
Data Sourced
via OSV·09:41 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which packages need to be updated?
The update applies to the tuxcare/io.micronaut micronaut-http-client and micronaut-json-core packages.
2
What version contains the fixes?
The three CVEs are fixed in version 3.8.4-tuxcare.1.